Privacy policy

Last updated: 27 October 2026

Who we are

This policy covers the website xchecksharedflight.com and the Crosscheck service (the Crosscheck program and the Crosscheck server). The data controller is Marco Buzzotta, Milan, Italy. For any question about your data, write to privacy@xchecksharedflight.com.

Minimum age

Crosscheck is for people aged 16 and over. If you're under 16, don't register or apply for the Closed Beta. If we learn that an account or a request belongs to someone under 16, we delete it.

Data we collect on this website

• Your account: username, email address, the registration code you used, and the dates you registered, confirmed your email and last signed in. We never store your password: we store only a key derived from it, which can't be turned back into the password.
• Closed Beta requests: if you apply for the Closed Beta, we store what you write in the form: name, date of birth, email, Discord username, country, native language, English level, simulator version, PC hardware, internet connection, VR headset, flying experience and your answers to the optional questions. We use it only to choose testers and contact them.
• Discord: if you link your Discord account, we store your Discord user ID, your Discord display name and the access keys Discord gives us, only to keep your Crosscheck roles up to date. You can remove the link at any time in Discord (User Settings > Authorized Apps).
• Security: to limit repeated attempts (sign-in, registration codes, emails) we record the IP address, the username or email and the time. These records are deleted after one day. Our web server also keeps standard access logs (IP address, page, browser).
• Cookies: one technical cookie that keeps you signed in during your visit. No advertising, analytics or tracking cookies.
• Fonts: the site uses the Barlow font from Google Fonts. To show it, your browser connects to Google, which receives your IP address. See Google's privacy policy.
• Emails: we send you only the emails the service needs, like confirming your address. They're sent from our own mail server.

Data used by Crosscheck

• Account: your username and the password-derived key are copied to the Crosscheck server so you can sign in from the program. Your email stays on the website.
• Friends: your friends, friend requests and blocked users.
• Connection: the Crosscheck server sees your IP address while you're connected and keeps it only in memory. To connect two pilots directly, it gives each one the other's public IP address and port. This happens only between friends who agreed to fly together.
• Logs and stats: the program option "Send logs and stats" is on by default, and you can turn it off in the Crosscheck panel. When it's on, or when you send a REPORT, the program sends its log to our server. A log can contain your public and local IP addresses, those of the pilot you fly with, usernames, file paths that may include your Windows user name, simulator and flight data, and the text of your report. We keep logs for 30 days, and only the Crosscheck administrators can read them, to fix problems.
• On your PC: the program keeps its settings and log in %LOCALAPPDATA%\Crosscheck. Your password is saved there only if you choose "Keep me logged in", encrypted by Windows so that only your Windows user can read it.

Crosscheck doesn't use advertising, analytics, telemetry or crash-reporting services.

Why we use your data

• To provide the service you signed up for: your account, signing in, friends and shared flights (GDPR art. 6(1)(b)).
• To evaluate your Closed Beta request, which you send us by choice (GDPR art. 6(1)(b), steps taken at your request).
• To keep the service secure and prevent abuse, and to fix problems using logs (our legitimate interest, GDPR art. 6(1)(f)). You can turn off "Send logs and stats" at any time.

Where your data is stored

Our servers are in Italy. Data isn't transferred outside the EU, except your IP address when your browser loads fonts from Google.

How long we keep it

• Account data: until your account is deleted.
• Closed Beta requests: until the end of the Closed Beta, or earlier if you ask us to delete yours.
• Unconfirmed registrations: deleted after 24 hours. Email confirmation links expire after 24 hours.
• Security records of attempts: one day.
• Logs sent by the program: 30 days.
• Usernames of deleted accounts: kept, without any other data, so they can't be registered again by someone else.

Who we share it with

We don't sell your data or share it for advertising. The pilots you fly with see your username and, for the direct connection, your IP address. Google receives your IP address when your browser loads the fonts.

Your rights

You can ask to access, correct or delete your data, to restrict or object to its use, and to receive it in a portable format. Write to privacy@xchecksharedflight.com from the email address of your account. To delete your account, write to the same address. You can also complain to the Italian data protection authority, the Garante per la protezione dei dati personali.

Changes

If this policy changes, we'll update it on this page and change the date at the top.